Privacy Policy

We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your personal data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Whenever you access a webpage, the web server automatically stores a server log file containing information such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider (access data). This information documents your visit.

This access data is evaluated exclusively to ensure the smooth operation of our website and to improve our services. In accordance with Art. 6(1), sentence 1, point (f) of the General Data Protection Regulation (GDPR), this serves our legitimate interests in ensuring the proper presentation of our services, which prevail in the context of a balancing of interests.

All access data is deleted no later than seven days after the end of your visit to our website.

Hosting Services Provided by a Third Party

As part of data processing on our behalf, a third-party service provider supplies hosting and website presentation services.

This serves our legitimate interests in ensuring the proper presentation of our services, which prevail in the context of a balancing of interests.

All data collected when using this website or through the forms provided in the online shop, as described below, is processed on the service provider's servers. Processing on other servers takes place only within the scope explained in this Privacy Policy.

The service provider is located in a country within the European Union or the European Economic Area.

2. Collection and Use of Data for Contract Processing and Customer Account Registration

We collect personal data when you voluntarily provide it to us during the booking process, when contacting us (e.g. via contact form or email), or when creating a customer account.

Mandatory fields are marked accordingly because the information is necessary for processing your contract, responding to your enquiry or creating your customer account. Without this information, you will not be able to complete your order, create an account or submit your enquiry.

The specific data collected can be seen in the respective input forms.

We use the data you provide in accordance with Art. 6(1), sentence 1, point (b) GDPR to fulfil contractual obligations and process your enquiries.

Once the contract has been fully completed or your customer account has been deleted, further processing of your data will be restricted. Your data will then be deleted after the applicable retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where legally permitted and explained in this Privacy Policy.

You may delete your customer account at any time, either by contacting us using the contact details provided below or by using the relevant function within your customer account.

3. Disclosure of Data

For the purpose of fulfilling our contractual obligations in accordance with Art. 6(1), sentence 1, point (b) GDPR, we disclose your data to the service providers responsible for carrying out your booking (e.g. mountain guides), insofar as this is necessary to fulfil the booking.

Depending on the payment service provider you select during the ordering process, we may forward the payment information collected for this purpose to the financial institution responsible for processing the payment, to payment service providers commissioned by us, or to the payment service selected by you.

In some cases, the selected payment service providers collect this data themselves if you create an account with them.

In such cases, you must log in to the relevant payment service provider during the ordering process using your account credentials.

The Privacy Policy of the respective payment service provider applies.

4. Email Newsletters and Postal Advertising

Email Advertising with Newsletter Subscription

If you subscribe to our newsletter, we use the data required for this purpose, or any additional information you provide separately, to send you our email newsletter on a regular basis based on your consent pursuant to Art. 6(1), sentence 1, point (a) GDPR.

You can unsubscribe from the newsletter at any time by contacting us using the contact details provided below or by clicking the unsubscribe link included in the newsletter.

After unsubscribing, your email address will be deleted unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where legally permitted and explained in this Privacy Policy.

Postal Advertising and Your Right to Object

We also reserve the right to use your first name, last name and postal address for our own advertising purposes, such as sending you information about interesting offers and our products by post.

This serves our legitimate interests in communicating promotional information to our customers, which prevail in the context of a balancing of interests, in accordance with Art. 6(1), sentence 1, point (f) GDPR.

5. Cookies and Web Analytics

We use cookies on various pages of our website to make your visit more enjoyable, enable certain functions, display suitable products and conduct market research.

This serves our legitimate interests in optimising the presentation of our services, which prevail in the context of a balancing of interests, in accordance with Art. 6(1), sentence 1, point (f) GDPR.

Cookies are small text files that are automatically stored on your device.

Some cookies are deleted after the browser session ends, meaning when you close your browser (session cookies).

Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies).

You can find information about the storage duration in the cookie settings of your web browser.

You can configure your browser to notify you whenever cookies are placed and decide individually whether to accept them. You can also exclude the acceptance of cookies in specific cases or generally.

Each browser handles cookie settings differently. Instructions on how to change your cookie settings can be found in the help menu of your browser.

Information for individual browsers is available at the following links:

• Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

• Safari™: https://support.apple.com/kb/ph21411?locale=de_DE

• Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

• Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

• Opera™: http://help.opera.com/Windows/10.20/de/cookies.html

If you choose not to accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for Web Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.de), to analyse website usage.

This serves our legitimate interests in optimising the presentation of our services, which prevail in the context of a balancing of interests, in accordance with Art. 6(1), sentence 1, point (f) GDPR.

Google (Universal) Analytics uses methods such as cookies to analyse how you use the website.

The information automatically collected about your use of this website is generally transmitted to and stored on a Google server in the United States.

By activating IP anonymisation on this website, your IP address is shortened before transmission within member states of the European Union or other countries that are parties to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.

The anonymised IP address transmitted by your browser as part of Google Analytics is generally not combined with other Google data.

Once the purpose for processing the data no longer applies and we stop using Google Analytics, the data collected in this context will be deleted.

Google LLC is headquartered in the United States and is certified under the EU-US Privacy Shield. A current certificate can be viewed here.

Based on this agreement between the United States and the European Commission, the European Commission has recognised an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting and processing the data generated by cookies relating to your use of the website (including your IP address) by downloading and installing the browser plugin available at:

http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can click the corresponding opt-out link to prevent Google Analytics from collecting data on this website in the future.

An opt-out cookie will then be stored on your device. If you delete your cookies, you will need to click the link again.

6. Social Media Plugins

Use of Social Plugins from Facebook, Google, Twitter and Instagram

Our website uses social plugins ("Plugins") provided by social networks.

When you visit a page on our website containing such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter or Instagram.

The plugin content is transmitted directly to your browser by the respective provider and integrated into the webpage.

By integrating these plugins, the providers receive information that your browser has accessed the corresponding page of our website, even if you do not have an account with the respective provider or are not currently logged in.

This information, including your IP address, is transmitted directly from your browser to a server operated by the respective provider (possibly in the United States) and stored there.

If you are logged in to one of these services, the provider may directly associate your visit to our website with your profile on the respective social network.

If you interact with the plugins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to the provider's server and stored there.

This information may also be published on the social network and displayed to your contacts.

This serves our legitimate interests in optimally marketing our services, which prevail in the context of a balancing of interests, in accordance with Art. 6(1), sentence 1, point (f) GDPR.

For information about the purpose and scope of data collection, the further processing and use of data by the providers, contact options, your rights and privacy settings, please consult the respective providers' privacy policies:

• Facebook: http://www.facebook.com/policy.php

• Twitter: https://twitter.com/privacy

• Google: http://www.google.com/intl/de/+/policy/+1button.html

• Instagram: https://help.instagram.com/155833707900388

If you do not want social networks to associate data collected through our website directly with your profile on the respective service, you must log out of that service before visiting our website.

You can also completely prevent plugins from loading by using browser add-ons, such as the script blocker "NoScript" (http://noscript.net/).

YouTube Video Plugins

Our website includes content provided by third parties. This content is supplied by Google LLC (the "Provider").

YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Enhanced privacy settings are enabled for YouTube videos embedded on our website.

This means that YouTube does not collect or store information about website visitors unless they play the video.

The integration of these videos serves our legitimate interests in optimally marketing our services, which prevail in the context of a balancing of interests, in accordance with Art. 6(1), sentence 1, point (f) GDPR.

For information about the purpose and scope of data collection, further processing and use of data by the providers, as well as your rights and privacy settings, please refer to Google's Privacy Policy:

http://www.google.com/intl/de/+/policy/+1button.html

7. Contact Information and Your Rights

As a data subject, you have the following rights:

- Under Art. 15 GDPR: The right to request information about the personal data we process about you, within the scope specified in that article.

- Under Art. 16 GDPR: The right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data stored by us.

- Under Art. 17 GDPR: The right to request the deletion of your personal data stored by us, unless further processing is necessary:

• To exercise the right to freedom of expression and information;

• To comply with a legal obligation;

• For reasons of public interest; or

• To establish, exercise or defend legal claims.

- Under Art. 18 GDPR: The right to request the restriction of processing of your personal data if:

• You dispute the accuracy of the data;

• The processing is unlawful, but you oppose the deletion of the data;

• We no longer need the data, but you require it to establish, exercise or defend legal claims; or

• You have objected to processing pursuant to Art. 21 GDPR.

- Under Art. 20 GDPR: The right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that the data be transferred to another controller.

- Under Art. 77 GDPR: The right to lodge a complaint with a supervisory authority. In general, you may contact the supervisory authority responsible for your usual place of residence, your workplace or our registered office.

For questions regarding the collection, processing or use of your personal data, requests for information, correction, restriction or deletion of data, withdrawal of consent or objections to specific uses of your data, please contact us directly using the contact details provided in our Legal Notice (Imprint).

Right to Object

Where we process personal data as described above to protect our legitimate interests, which prevail in the context of a balancing of interests, you may object to such processing with effect for the future.

If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above.

If the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

This exception does not apply if the processing is carried out for direct marketing purposes.

In that case, we will no longer process your personal data for direct marketing.